Privacy Policy

Privacy Policy

Effective date: December 21, 2018

Career Girls, a 501(c)(3) nonprofit organization (“us”, “we”, or “our”) operates the www.careergirls.org website (the “Website”). This page informs you of our policies regarding the collection, use, and disclosure of Personal Data when you use our Website and the choices you have associated with that data. We use your data to provide and improve the Website. By using the Website, you agree to the collection and use of information in accordance with this policy.

Definitions:

Personal Data. Personal Data means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession).

Usage Data. Usage Data is data collected automatically either generated by the use of the Website or from the Website infrastructure itself (for example, the duration of a page visit).

Data Controller. Data Controller means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any Personal Data are, or are to be, processed.
For the purpose of this Privacy Policy, we are a Data Controller of your Personal Data.

Data Processors. Data Processor means any natural or legal person who processes the data on behalf of the Data Controller.

How we collect your Personal Data:You are not required to register or provide information to us in order to view our Website. We collect information from you in the following ways:

Your submission of Personal Data when you voluntarily choose to communicate with us on the “Contact Us” page of our Website or when you communicate with us by telephone or email;

Your submission of Personal Data when you submit stories, poems, photos and artwork through our “Submit a Story” page on our Website;

Your submission of Personal Data when you submit testimonials about what you love about Career Girls through our “Teen Testimonials” page on our Website;

Your submission of Personal Data when you voluntarily choose to communicate with us on the “Volunteer” page on our Website;

Your election to donate through the functionality provided by our third party payment Data Processor;

Information submitted by or obtainable from your internet service provider, software, computer, mobile device, or other method of accessing the Website (which you may be able to control through the settings of your software and devices) which we collect in our server logs.

What types of Personal Data we collect:We collect information through use of our Website and third party Data Processors:

While using the “Contact Us” page of our Website, we ask you to provide us with certain Personal Data: email address, first name and last name;

While using the “Submit a Story” page of our Website, we ask you to provide us with certain Personal Data, including: name, grade level, country, email address, Instagram handle, Facebook name, YouTube Channel;

While using the “Teen Testimonials” page of our Website, we ask you to provide us with certain Personal Data, including: name, grade level, country, email address;

While using the “Volunteer” page of our Website, we ask you to provide us with certain Personal Data, including: email address, first name and last name;

When you elect to donate, unless you choose to do so anonymously, we receive from our third party payment Data Processor your following Personal Data: email address, first name and last name;

Through the use of Usage Data, including without limitation button clicks, pages visits, the length of time using the Website or any portion thereof, your interactions with the Website and the frequency of your use of the Website or any portion thereof;

How we process and use your Personal Data:We may process and use your Personal Data primarily to perform a contract with you, and to otherwise deliver information that you request, including:

To provide and maintain our Website.

We may also process your Personal Data because it is necessary for our or a third party's legitimate interests and it’s not overridden by your rights. In this respect, we may use your Personal Data to:

To provide customer support or reply to your message or communication to us;

To gather analysis or valuable information so that we can improve our Website;

To monitor the usage of our Website;

To detect, prevent and address technical issues.

We may also process your Personal Data for our compliance with our legal obligations. In this respect, we may use your Personal Data for the following:

To satisfy laws or governmental or legal requests for such information or otherwise meet our compliance and regulatory obligations, both in the US and the EU, including with respect to any EU Member State where we are providing our Website;

To prevent or investigate possible wrongdoing in connection with the Website;

To protect the personal safety of users of the Website or the public;

To protect against legal liability;

For fraud prevention via third party Website.
In addition, we may also process your Personal Data:

To enforce any of our rights under this Privacy Policy, any Website specific terms and conditions, or any other rights we may have;

When we have your specific or, where necessary, explicit consent to do so.

With whom will we share your Personal Data:We generally do not share your Personal Data with third parties. However, we may share your Personal Data:

With users of our Website, specifically when you (or, if you are under 18 years old, your legal guardian) gives us permission to post your submission in the “Teen Testimonials” page of our Website. We will only share the following specific Personal Data: your first name and your grade level;

With our employees, if necessary for the development, improvement, and provision of our Website;

With Data Processors when they meet the requirements of this Privacy Policy;

Under certain circumstances, if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency);

If in good faith, we believe that such action is necessary to comply with a legal obligation or to protect and defend the rights or property of Career Girls.

When do we transfer your Personal Data outside of the EU:If your Personal Data is subject to GDPR, in the course of providing the Website to you, we may transfer your Personal Data outside of the EU, principally to our servers in the United States; this means that your Personal Data will not have the automatic protection of European data protection laws (including the GDPR) which apply in the EU. In these circumstances, in order to ensure that your Personal Data continues to have adequate protection when it is transferred outside the EU, your Personal Data will only be transferred on one of the following bases:

Where the transfer is subject to one or more of the appropriate safeguards for international transfers prescribed by applicable law (for example, standard data protection clauses adopted by the European Commission);

a European Commission decision provides that the country or territory to which the transfer is made ensures an adequate level of protection; or

there exists another situation where the transfer is permitted under applicable law (for example, where we have your explicit consent).

You can obtain more details of the protection given to your Personal Data when it is transferred outside the EU by contacting us using the details set out below.

Our liability for transfers of your Personal Data:We require third-party Data Controllers to whom we disclose your Personal Data to contractually agree to (i) only process such Personal Data for the limited and specified purposes consistent with the consent you provide; and (ii) provide the same level of protection to your Personal Data as required under this Privacy Policy; and (iii) notify us if the third-party Data Controller makes a determination that it can no longer meet the foregoing obligations.

In addition, when we transfer your Personal Data to a third party Data Processor acting as our agent, we will: (i) transfer such Personal Data only for the limited and specified purposes consistent with the request or consent you provide; (ii) contractually require the Data Processor to provide at least the same level of privacy protection as is required by this Privacy Policy; (iii) require the Data Processor to notify us if it makes a determination that it can no longer meet its obligation to provide the same level of protection as is required by the this Privacy Policy. Should we receive any such notice, we will take reasonable and appropriate steps to stop and remediate unauthorized processing.

We shall remain liable should our Data Processors process Personal Data in a manner inconsistent with this Privacy Policy, unless we can prove we are not responsible for the event giving rise to the damage. We acknowledge our liability for such data transfers to third parties in violation of this Privacy Policy.

Retention of Data:
We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to perform a contract with you, comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

We will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Website, or we are legally obligated to retain this data for longer time periods.

Security of Data:
The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

California residents -- Your California privacy rights:
California's "Shine the Light" law, Civil Code section 1798.83, requires certain businesses to respond to requests from California customers asking about the business' practices related to disclosing Personal Data to third parties for the third parties' direct marketing purposes. Alternately, businesses may have in place a policy not to disclose Personal Data of customers to third parties for the third parties' direct marketing purposes if the customer has exercised an option to opt-out of such information-sharing. We require you to expressly opt-in to any disclosure of your Personal Data to third parties for the third parties' direct marketing purposes which is stricter than required under California law.

Your Data Protection Rights Under General Data Protection Regulation (GDPR)
If you are a resident of the EU, you have certain data protection rights. We aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.
If you wish to be informed what Personal Data we hold about you and if you want it to be removed from our systems, please contact us at /about/contact-us/.

In certain circumstances, you have the following data protection rights. Please note that these rights are not absolute, and we may be entitled to refuse requests where exceptions apply.

The right to access, update or to delete the information we have on you. Whenever made possible, you can access, update or request deletion of your Personal Data directly within your account settings section. If you are unable to perform these actions yourself, please contact us to assist you.

The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete.

The right to object. You have the right to object to our processing of your Personal Data.

The right of restriction. You have the right to request that we restrict the processing of your Personal Data.

The right to data portability. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format.

The right to withdraw consent. You also have the right to withdraw your consent at any time where we relied on your consent to process your Personal Data.

Please note that we may ask you to verify your identity before responding to such requests.
You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the EU.

Data Processors
We employ third party Data Processors to facilitate our Website, to provide the Website on our behalf, to perform Website-related Website or to assist us in analyzing how our Website is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose and must comply with the requirements for third party processors set forth in this Privacy Policy.

Data Controllers
We solicit donations within the Website through the use of third-party Data Controllers for payment processing.

We do not collect or store your payment card details. That information is collected directly by our third-party payment processors whose use of your Personal Data is governed by their privacy policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information. The payment processors we work with are:

Donorbox
Their Privacy Policy can be viewed at https://donorbox.org/privacy

BitPay
Their Privacy Policy can be viewed at https://bitpay.com/about/privacy

Links to Other Sites
Our Website may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party’s site. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or Website.

Children’s Privacy and international considerations:
Our Website does not address anyone under the age of 18 (“Children”).
We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers. We encourage parents to regularly monitor their children’s online activities—in keeping with the principle regarding web pages targeted to children under 13 put forth by the Children’s Advertising Review Unit (CARU) of the Better Business Bureau.

We are headquartered in the United States and any information that you submit or we otherwise obtain will be transferred to, collected, and held in the United States. We may subsequently transfer such information to any other country or jurisdiction in connection with the authorized uses and disclosures of information set forth herein. Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.

If you are located outside United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to United States and process it there.
Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

Changes to This Privacy Policy:
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know via email and/or a prominent notice on our Website, prior to the change becoming effective and update the “effective date” at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us:
If you have any questions about this Privacy Policy, or any concerns regarding the collection, use and disclosure of your Personal Data, or to instruct us regarding your choices regarding your Personal Data, please contact us by visiting this page on our Website: /about/contact-us/. We will attend to your questions, concerns or instructions promptly.